Traffic Trace Info
DumpFile: 200504091400.dump
FileSize: 376.09MB
Id: 200504091400
StartTime: Sat Apr 9 14:00:00 2005
EndTime: Sat Apr 9 14:15:01 2005
TotalTime: 900.35 seconds
TotalCapSize: 293.96MB CapLen: 96 bytes
# of packets: 5382820 (2037.95MB)
AvgRate: 18.99Mbps stddev:3.12M
IP flow (unique src/dst pair) Information
# of flows: 539733 (avg. 9.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.3% 4.7% 3.9% 3.3% 2.2% 1.5% 1.5% 1.4% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 364339
Top 10 bandwidth usage (bytes/total in %):
19.5% 10.3% 6.3% 6.3% 5.2% 4.7% 4.1% 3.9% 3.9% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200504091400.pktlen.png)
detailed numbers
[ 16- 31]: 37814
[ 32- 63]: 2032027
[ 64- 127]: 1662450
[ 128- 255]: 170942
[ 256- 511]: 144343
[ 512- 1023]: 208143
[ 1024- 2047]: 1127101
Protocol Breakdown
![[protocol breakdown chart]](200504091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 5382820 (100.00%) 2136946702 (100.00%) 396.99
ip 5309358 ( 98.64%) 2134748445 ( 99.90%) 402.07
tcp 4434917 ( 82.39%) 1948219686 ( 91.17%) 439.29
http(s) 951193 ( 17.67%) 1126321773 ( 52.71%) 1184.11
http(c) 1263276 ( 23.47%) 148312297 ( 6.94%) 117.40
squid 3998 ( 0.07%) 1032223 ( 0.05%) 258.18
smtp 99045 ( 1.84%) 21120731 ( 0.99%) 213.24
nntp 41 ( 0.00%) 2738 ( 0.00%) 66.78
ftp 65509 ( 1.22%) 25985068 ( 1.22%) 396.66
pop3 1917 ( 0.04%) 203494 ( 0.01%) 106.15
imap 1256 ( 0.02%) 145600 ( 0.01%) 115.92
telnet 872 ( 0.02%) 83296 ( 0.00%) 95.52
ssh 2659 ( 0.05%) 325545 ( 0.02%) 122.43
dns 1456 ( 0.03%) 103390 ( 0.00%) 71.01
bgp 126 ( 0.00%) 32776 ( 0.00%) 260.13
napster 199 ( 0.00%) 15379 ( 0.00%) 77.28
realaud 1 ( 0.00%) 62 ( 0.00%) 62.00
rtsp 66400 ( 1.23%) 49321870 ( 2.31%) 742.80
icecast 1553 ( 0.03%) 278428 ( 0.01%) 179.28
other 1965213 ( 36.51%) 574583529 ( 26.89%) 292.38
udp 455835 ( 8.47%) 130951487 ( 6.13%) 287.28
dns 343376 ( 6.38%) 98012003 ( 4.59%) 285.44
realaud 120 ( 0.00%) 12135 ( 0.00%) 101.12
halflif 10 ( 0.00%) 623 ( 0.00%) 62.30
everque 394 ( 0.01%) 78416 ( 0.00%) 199.03
quake 2 ( 0.00%) 172 ( 0.00%) 86.00
other 110159 ( 2.05%) 32787082 ( 1.53%) 297.63
icmp 128151 ( 2.38%) 10516520 ( 0.49%) 82.06
ipsec 88 ( 0.00%) 8272 ( 0.00%) 94.00
ip6 1551 ( 0.03%) 186479 ( 0.01%) 120.23
other 288816 ( 5.37%) 44866001 ( 2.10%) 155.34
frag 47 ( 0.00%) 22444 ( 0.00%) 477.53
tcpdump file: 200504091400.dump.gz (141.84 MB)